Skip to content
CVE PROGRAM SOURCE RECORD5.3 Medium

CVE-2022-25858

Regular Expression Denial of Service (ReDoS)

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
snyk

Description

The package terser before 4.8.1, from 5.0.0 and before 5.14.2 are vulnerable to Regular Expression Denial of Service (ReDoS) due to insecure usage of regular expressions.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

n/a terser

  • unspecified to < 4.8.1affected
  • 5.0.0 to < unspecifiedaffected
  • unspecified to < 5.14.2affected

References